PT-2019-13060 · Unknown · Doomseeker+1

Pol M + 1 · Publicado 2019-06-26 · Atualizado 2019-07-02 · CVE-2019-12968

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Doomseeker versions 1.1 through 1.2

Description A vulnerability was found in the Sonic Robo Blast 2 (SRB2) plugin distributed with Doomseeker, where affected plugin versions did not discard IP packets with an unnaturally long response length from a Sonic Robo Blast 2 master server. This allowed a remote attacker to cause a potential crash or denial of service in Doomseeker.

Recommendations For Doomseeker versions 1.1 and 1.2, update to Doomseeker 1.3, which includes source code patches to the SRB2 plugin to remediate the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2019-12968

Produtos afetados

Doomseeker

Sonic Robo Blast 2

Referências · 6

• https://bitbucket.org/Doomseeker/doomseeker/commits/b9a90f1f56e704c5cbeefe83da2f9ce939920278 · Correção
• https://bitbucket.org/Doomseeker/doomseeker/commits/ae456aac888cb794ea3292f7f99cb87d6b22a555 · Correção
• https://osv.dev/vulnerability/CVE-2019-12968 · Aviso do Fabricante
• https://zandronum.com/tracker/view.php?id=3660 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-12968 · Nota de Segurança
• https://bitbucket.org/Doomseeker/doomseeker/pull-requests/74/more-openbsd-issues-3654-the-srb2-thingy/diff · Correção